X-Git-Url: https://iankelling.org/git/?a=blobdiff_plain;f=fai%2Fconfig%2Fscripts%2FGRUB_PC%2F11-iank;h=1234474396cab62da1f83b97e1c97b031b852636;hb=78a1427fc167ccee73d448054a9c40c19d737ed3;hp=0df904b6cf85f0f6fa3ceb9073058f5c11a8f9da;hpb=05e47f6734e5a9354a3243686ae55fe4ab2b72c7;p=automated-distro-installer diff --git a/fai/config/scripts/GRUB_PC/11-iank b/fai/config/scripts/GRUB_PC/11-iank index 0df904b..1234474 100755 --- a/fai/config/scripts/GRUB_PC/11-iank +++ b/fai/config/scripts/GRUB_PC/11-iank @@ -13,6 +13,7 @@ if ! type -t fcopy &>/dev/null; then fi chroot $FAI_ROOT bash <<'EOFOUTER' +set -eE -o pipefail if getent group systemd-journal >/dev/null; then # makes the journal be saved to disk. mkdir -p /var/log/journal @@ -27,9 +28,9 @@ EOFOUTER # -r = recursive # -i = ignore non-matching class warnings, always exit 0 # -B = no backup files -fcopy -riB /boot +fcopy -riBM /boot # this is also done by FABASE/10-misc by default. -fcopy -riB /root +fcopy -riBM /root src=$FAI/distro-install-common/shadow @@ -42,7 +43,7 @@ fi $FAI/distro-install-common/end if ifclass VOL_STRETCH_BOOTSTRAP; then - fcopy -ri /etc/systemd/system + fcopy -riM /etc/systemd/system chroot $FAI_ROOT bash <<'EOFOUTER' systemctl enable fai_check.service EOFOUTER @@ -52,12 +53,24 @@ fi # these get copied in an earlier stage by fai, but leaving it here since # I run this as a single post-fai script to update things that have changed. -fcopy -riB /etc/apt +fcopy -riBM /etc/apt # outside of fai, this seems to regularly lead to # E: Could not get lock /var/lib/apt/lists/lock - open (11: Resource temporarily unavailable) # so add a sleep. 1 sec is probably way more than needed. sleep 1 -$ROOTCMD apt-get update +f=$FAI_ROOT/var/cache/apt/pkgcache.bin +if [[ ! -r $f ]] || (( $(( $(date +%s) - $(stat -c %Y $f ) )) > 60*60*2 )); then + i=0 + while fuser $FAI_ROOT/var/lib/dpkg/lock &>/dev/null; do + sleep 1 + i=$(( i+1 )) + if (( i > 300 )); then + echo "error: timed out waiting for /var/lib/dpkg/lock" >&2 + exit 1 + fi + $ROOTCMD apt-get update + done +fi chroot $FAI_ROOT bash <<'EOF' @@ -83,7 +96,11 @@ chmod 700 /root/.ssh dpkg-reconfigure -fnoninteractive resolvconf # default jessie groups + kvm, systemd-journal, adm -usermod -aG adm,cdrom,floppy,sudo,audio,dip,video,plugdev,netdev iank +for g in adm cdrom floppy sudo audio dip video plugdev netdev; do + if getent gropu $g >/dev/null; then + usermod -aG $g iank + fi +done if getent group systemd-journal >/dev/null; then usermod -aG systemd-journal iank @@ -98,23 +115,68 @@ EOF if [[ $FAI_ACTION != dirinstall ]]; then - chroot $FAI_ROOT bash <<'EOF' - # https://askubuntu.com/questions/33416/how-do-i-disable-the-boot-splash-screen-and-only-show-kernel-and-boot-text-inst - # it suggests not having plymouth-theme-ubuntu-text, but - # making it not installed then kills plymouth, then makes - # the system not boot. - sed -ri 's/(^ *GRUB_CMDLINE_LINUX.*)quiet splash/\1/' /etc/default/grub - # on xenial, no grub is displayed at all. fix that. - # found just by noticing this in the config file, and a - # warning about it in error.log - sed -i '/^ *GRUB_HIDDEN_TIMEOUT/d' /etc/default/grub - - update-grub2 + + + # luks options, see man systemd-cryptsetup-generator + # all i know is that with luks.crypttab=no, swap still timed out on boot. + # and with rd.luks.crypttab=no, it works. + cmdline="rd.luks.crypttab=no console=ttyS0" + if ifclass LINODE; then + speed=19200 + cmdline+=",${speed}n8" + cmdline="rd.luks.crypttab=no console=ttyS0,${speed}n8" + else + speed=115200 + cmdline+=",${speed}n8 console=tty0" + fi + + cat >$FAI_ROOT/etc/grub.d/40_custom </etc/initramfs-tools/modules +update-initramfs -u -k all EOF + fi fi -# reading through the groups that iank is in but traci isn't, +# reading through the groups that iank is in but user2 isn't, for g in plugdev audio video cdrom; do - $ROOTCMD usermod -a -G $g traci + $ROOTCMD usermod -a -G $g user2 done